Cloudburst

Cloudburst (legal name Cloudburst Technologies, Inc.) operates an off-chain intelligence platform that collects open-source data from messaging apps such as Telegram and Discord, social media, forums, dark web markets, data breaches, stealer logs and regulatory filings, and converts it into structured, attributed evidence. The company positions its work as complementary to blockchain analytics: on-chain tools show funds moving, while Cloudburst aims to identify the people and organizations behind wallets, aliases and infrastructure.

The platform is organized around five stages: large-scale off-chain collection; AI enrichment including translation, transcription, media analysis and classification across languages; entity resolution and graph construction connecting aliases, wallets, people and organizations; risk scoring for users, organizations and crypto activity with supporting evidence; and a natural-language query layer ("Ask Cloudburst") that returns sourced answers and reports on demand. Outputs are also available outside the user interface via an API, an MCP server for AI assistants and agents, and bulk data delivery into customer data lakes. Earlier company materials from 2023 described real-time monitoring and a Cloudburst API focused on detecting cryptocurrency market manipulation tactics such as price pumping, wash trading and spoofing.

Stated use cases span financial crime and compliance (resolving flagged wallets to identities, counterparty screening, evidence attached to alerts), threat intelligence (persona resolution across platforms, tracking ransomware and initial-access brokers), national security (mapping illicit financing and sanctions-evasion networks, monitoring closed channels), and fraud and investigations (detecting scam and "pig butchering" operations).

Founding story

Cloudburst was founded in 2022 by Evan Kohlmann, a cyberintelligence specialist with over two decades tracking terrorist organizations and other threat actors through their electronic communications, and who previously founded Flashpoint and spent 18 years as an on-air terrorism analyst for NBC News. The company's premise is that illicit actors plan activity off-chain — in chat platforms and deep and dark web venues — rather than on the blockchain, so collection should focus there.

Business model

Cloudburst sells intelligence software and data to institutional customers. Access is offered through its own investigation platform as well as an API, an MCP server for integration with AI assistants and agents, and bulk data delivery into customers' own data lakes and analytics environments. Specific pricing terms are not disclosed in the sources.

Revenue is derived from providing intelligence tooling and data to institutional customers via platform access, API queries, an MCP server and bulk data delivery; no pricing, contract values or revenue figures are disclosed in the sources.

Traction

Company materials cite over 600 million messages collected, more than 55 million users profiled and over 12 million crypto addresses linked. Press coverage of the October 2025 Series A states Cloudburst works with major exchanges, compliance teams and government bodies, and that total funding since its 2022 launch reached $11 million. The company also lists an In-Q-Tel Mission Certified recognition.

Latest developments

In October 2025 Cloudburst announced a $7 million Series A led by Borderless Capital with Strategic Cyber Ventures, CoinFund, Coinbase Ventures, Bloccelerate VC and In-Q-Tel participating, to be used for expanding AI and data science teams, accelerating product development and entering new markets. Current site messaging emphasizes off-chain attribution, an "Ask Cloudburst" natural-language query layer, an MCP server for AI agents, and In-Q-Tel Mission Certified status.